Information processing apparatus and method

- Sony Corporation

In order to limit use of content, when a source receives a request for transmitting content from a sink, the source performs an authentication process. When the authentication is successful, the source transmits to the sink key information necessary for decrypting the encryption applied to the content. The sink can receive the content by receiving the key information and by decrypting the encryption applied to the content by using the key information.

Skip to: Description  ·  Claims  ·  References Cited  · Patent History  ·  Patent History
Description
CROSS-REFERENCE TO RELATED APPLICATIONS

This application is a continuation of U.S. application Ser. No. 12/002,805, filed on Dec. 19, 2007, which is a continuation of U.S. application Ser. No. 09/900,584, filed on Jul. 6, 2001, now U.S. Pat. No. 7,343,491, which claims priority from Japanese Application Nos. P2000-205615, filed Jul. 6, 2000, and P2000-211787, filed Jul. 12, 2000, the disclosures of which are hereby incorporated by reference herein.

BACKGROUND OF THE INVENTION

The present invention relates to an information processing apparatus and method. More particularly, the present invention relates to an information processing apparatus and method in which use of content can be limited.

In recent years, network systems typified by the Internet have become popular. As a result, it is now possible for users to transmit or receive information via the Internet.

A user who wants to view or listen to authored material such as movies or music can pay to receive the authored material.

However, there is a risk that in addition to the owner, other people, who have not paid to receive authored material such as movies or music, may fraudulently view or listen to the authored material through a network such as the Internet.

Also, if illegal viewing or listening through a network continues unrestrained, the content creation and distribution business will suffer.

SUMMARY OF THE INVENTION

The present invention has been made in view of such circumstances. An object of the present invention is to prevent content from being illegally used via a network.

To this end, in one aspect, the present invention provides an information processing apparatus for transmitting content to another apparatus via a network. The information processing apparatus includes an encryption unit operable to encrypt the content; an authentication unit operable to perform an authentication procedure with the another apparatus when the another apparatus requests permission to receive the encrypted content, the authentication procedure providing an authentication result; a transmitter operable to transmit a decryption key for decrypting the encrypted content to the another apparatus based on the authentication result; a first obtaining unit operable to obtain identification information of the another apparatus based on the authentication result; a first counting unit operable to count a total number of units desiring to receive the encrypted content based on the identification information; a storage unit operable to store the identification information of the another apparatus; and a controller operable to control a total number of units approved to receive the encrypted content based on the total number of units desiring to receive the encrypted content.

The information processing apparatus may further include a second obtaining unit operable to obtain a number of additional units desiring to receive the encrypted content from the another apparatus based on the authentication result; and a second counting unit operable to count a total number of units of the another apparatus desiring to receive the encrypted content based on the number of additional units.

The information processing apparatus may further include an information updating unit operable to delete the identification information stored in the storage unit and to reset the total number of units approved to receive the encrypted content when the decryption key is changed.

In another aspect, the present invention provides a method for transmitting content from an information processing apparatus to another apparatus via a network. The method includes encrypting the content; performing an authentication procedure with the another apparatus when the another apparatus requests permission to receive the encrypted content, the authentication procedure producing an authentication result; transmitting a decryption key for decrypting the encrypted content to the another apparatus based on the authentication result; obtaining identification information of the another apparatus based on the authentication result; counting a total number of units desiring to receive the encrypted content based on the identification information; storing the identification information of the another apparatus; and controlling a total number of units approved to receive the encrypted content based on the total number of units desiring to receive the encrypted content.

In another aspect, the present invention provides a recording medium having recorded thereon a program for transmitting content from an information processing apparatus to another apparatus in a network, the program including encrypting the content; performing an authentication procedure with the another apparatus when the another apparatus requests permission to receive the encrypted content, the authentication procedure producing an authentication result; transmitting a decryption key for decrypting the encrypted content to the another apparatus based on the authentication result; obtaining identification information of the another apparatus based on the authentication result; counting a total number of units desiring to receive the encrypted content based on the identification information; storing the identification information of the another apparatus; and controlling a total number of units approved to receive the encrypted content based on the total number of units desiring to receive the encrypted content.

In the information processing apparatus, the information processing method, and the program recorded on the recording medium, content is encrypted, and when a request for reception permission is made from another apparatus, an authentication procedure is performed with the other apparatus as long as the number of receiving units does not exceed a permissible value even if the reception is permitted, and a decryption key for decrypting the encrypted content is transmitted to the other apparatus on the basis of the authentication result.

In another aspect, the present invention provides an information processing apparatus for receiving content from a first apparatus via a first network. The information processing apparatus includes a first transmitter operable to transmit to the first apparatus a request for permission to receive the content; a first authentication unit operable to perform a first authentication procedure with the first apparatus, the first authentication procedure producing a first authentication result; a receiver operable to receive from the first apparatus a first decryption key for decrypting the content based on the first authentication result; a second transmitter operable to transmit the content received from the first apparatus to a second apparatus via a second network; a second authentication unit operable to perform a second authentication procedure with the second apparatus when a request for permission to receive the content is made from the second apparatus, the second authentication procedure producing a second authentication result; a third transmitter operable to transmit a second decryption key to the second apparatus based on the second authentication result; a first obtaining unit operable to obtain identification information of the second apparatus based on the second authentication result; a first counting unit operable to count a number of units desiring to receive the content based on the identification information; a storage unit operable to store the identification information of the second apparatus; and a controller operable to control a number of units approved to receive the content based on the number of units desiring to receive the content.

The information processing apparatus of the present invention may further include a decryption unit operable to decrypt the content; and an encryption unit operable to encrypt the content decrypted by the decryption unit.

The information processing apparatus of the present invention may further include a fourth transmitter operable to transmit the number of units desiring to receive the content to the first apparatus based on the first authentication result; a second obtaining unit operable to obtain a number of additional units desiring to receive the content from the second apparatus based on the second authentication result; and a second counting unit operable to count a total number of units of the second apparatus desiring to receive the content based on the number of additional units.

The information processing apparatus in accordance with this aspect of the present invention may further include an information updating unit operable to delete the identification information stored in the storage unit and to reset the number of units approved to receive the content when the second decryption key is changed.

In another aspect, the present invention provides a method for receiving content in an information processing apparatus from a first apparatus via a first network. The method includes transmitting to the first apparatus a request for permission to receive the content; performing a first authentication procedure with the first apparatus to obtain a first authentication result; receiving from the first apparatus a first decryption key for decrypting the content based on the first authentication result; transmitting the content received from the first apparatus to a second apparatus via a second network; performing a second authentication procedure with the second apparatus when a request for permission to receive the content is made from the second apparatus, the second authentication procedure producing a second authentication result; transmitting a second decryption key to the second apparatus based on the second authentication result; obtaining identification information of the second apparatus based on the second authentication result; counting a number of units desiring to receive the content based on the identification information; storing the identification information of the second apparatus; and controlling a number of units approved to receive the content based on the number of units desiring to receive the content.

In another aspect, the present invention provides a recording medium having recorded thereon a program for receiving content in an information processing apparatus from a first apparatus via a network. The program includes transmitting to the first apparatus a request for permission to receive the content; performing a first authentication procedure with the first apparatus to obtain a first authentication result; receiving from the first apparatus a first decryption key for decrypting the content based on the first authentication result; transmitting the content received from the first apparatus to a second apparatus via a second network; performing a second authentication procedure with the second apparatus when a request for permission to receive the content is made from the second apparatus, the second authentication procedure producing a second authentication result; transmitting a second decryption key to the second apparatus based on the second authentication result; obtaining identification information of the second apparatus based on the second authentication result; counting a number of units desiring to receive the content based on the identification information; storing the identification information of the second apparatus; and controlling a number of units approved to receive the content based on the number of units desiring to receive the content.

In the information processing apparatus, the information processing method, and the program recorded on the recording medium, the content received from the first apparatus via the first network is transmitted to the second apparatus via the second network with the permissible number of units obtained from the first apparatus as an upper limit.

The above and further objects, aspects and novel features of the invention will become more fully apparent from the following detailed description when read in conjunction with the accompanying drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a block diagram showing an example of the configuration of a network system to which the present invention is applied;

FIG. 2 is a block diagram showing a detailed example of the construction of a source of FIG. 1;

FIG. 3 is a block diagram showing a detailed example of the construction of a sink of FIG. 1;

FIG. 4 is a block diagram showing a detailed example of the construction of a bridge of FIG. 1;

FIG. 5 is an illustration of an authentication process between a source or a bridge, and a sink;

FIG. 6 is a flowchart illustrating an authentication process by the sink for a source or a bridge;

FIG. 7 is a flowchart illustrating an authentication process by a source or a bridge for a source;

FIG. 8 is a flowchart illustrating an authentication process by a source or a Tx bridge for an Rx bridge;

FIG. 9 is a flowchart illustrating an authentication process by the Rx bridge for the source or the Tx bridge; and

FIG. 10 is a flowchart illustrating an authentication process by the source or the Tx bridge for the Rx bridge.

 DETAILED DESCRIPTION

FIG. 1 is a block diagram showing an example of the configuration of a network system to which the present invention is applied. In this network system, a source 1 is connected to a sink 2-1 and a bridge 3-1 via a bus 4-1. The bridge 3-1 is connected to a sink 2-2 and a bridge 3-2 via a bus 4-2. Furthermore, the bridge 3-2 is connected to sinks 2-3 and 2-4 via a bus 4-3.

The source 1 is an output device for outputting content. When content is to be output, the source 1 encrypts the content, then outputs the encrypted content to the sinks 2-1 to 2-4 via the buses 4-1 to 4-3. Key information necessary for decrypting the encrypted content is transferred only to the sink which has succeeded in an authentication process. As a result, the number of sinks which receive the content is limited. Since the bridges 3-1 and 3-2 (to be described later) only re-output a received signal, these are excluded from the object for which the number of units is counted.

Sinks 2-1 to 2-4 (hereinafter, when the sinks 2-1 to 2-4 do not need be individually identified, they are referred to simply as a “sink 2”, and the same applies to other devices) are receiving units for receiving content supplied from the source 1. If a sink 2 succeeds in the authentication process, the sink 2 decrypts the received content on the basis of the key information transferred from the source 1. However, when the bridges 3-1 and 3-2 decrypt the encryption once, and encrypt with a new key and output the encrypted content, the sinks 2-2 to 2-4 decrypt the received content on the basis of the key information transferred from the bridge which is connected directly thereto.

It is assumed that the bridges 3-1 and 3-2 receive and decrypt the encrypted content which is output from the source 1, re-encrypt the content, and then output it to the sinks 2-2 to 2-4. For this purpose, the bridge 3-1 performs an authentication process with the source 1, obtains key information necessary for decrypting the encrypted content, and tells the source 1 the number of sinks 2 for which the content to be re-output is desired to be received. Then, when the bridge 3-1 obtains permission from the source 1, the bridge 3-1, instead of the source 1, limits the number of sinks 2-2 to 2-4 which receive the content. The bridge 3-2 performs an authentication process with the bridge 3-1, and similarly limits the number of sinks 2-3 and 2-4 which receive the content.

FIG. 2 is a block diagram showing a detailed example of the construction of the source 1.

When a medium 12 is loaded, a content player 11, under the control of a control section 15, plays back the content recorded on the medium 12, and outputs the content to an encryption section 13. The encryption section 13 encrypts the content input from the content player 11, and outputs it externally via a communication interface (I/F) 14. In place of the content player 11 and the medium 12, a source having a tuner which receives and outputs broadcast content may be used.

The control section 15 controls the content player 11, the encryption section 13, the communication I/F 14, and a storage section 16. Also, the control section 15 causes the content played back by the content player 11 to be stored in the storage section 16 as necessary.

FIG. 3 is a block diagram showing a detailed example of the construction of a sink 2.

A control section 24 controls an image/audio output section 21, a decryption section 22, a communication I/F 23, and a storage section 25. Also, the control section 24 sends the encrypted content, transmitted via the communication I/F 23, to the decryption section 22.

The decryption section 22 obtains the key information transmitted from the source 1 through the communication I/F 23. Also, the decryption section 22 decrypts the content on the basis of the obtained key information. The image/audio output section 21 outputs the content decrypted by the decryption section 22.

FIG. 4 is a block diagram showing a detailed example of the construction of a bridge 3.

A control section 35 controls a communication I/F 31, a decryption section 32, an encryption section 33, a communication I/F 34, and a storage section 36. Also, the control section 35 sends the encrypted content, transmitted via the communication I/F 31, to the decryption section 32.

The decryption section 32 obtains the key information transmitted from the source 1 via the communication I/F 31, and decrypts the received content on the basis of the obtained key information.

The encryption section 33 encrypts the content decrypted by the decryption section 32, and externally outputs it via the communication I/F 34.

It is assumed that, for authentication, public-key cryptographic technology is used, and that the source 1, the sink 2, and the bridge 3 each have a digital certificate (hereinafter referred to as a “certificate”), issued by the key management organization, a secret key, and a public key of the key management organization. It is assumed that this certificate contains a public key for each device, corresponding to the secret key for each device, the unique ID of each device, and an electronic signature for these two pieces of data supplied by the key management organization.

FIG. 5 is an illustration of an authentication process in a case where the source 1 and the sink 2-1 (FIG. 1) are directly connected.

Initially, the sink 2-1 transmits its own certificate to the source 1. Specifically, the control section 24 of the sink 2-1 reads a certificate from the storage section 25, and transmits it as a communication command to the source 1 via the communication I/F 23 ({circle around (1)} in FIG. 5).

When the source 1 receives this communication command, the source 1 determines whether or not the data is valid. Specifically, the control section 15 of the source 1 checks whether or not the data in the certificate received via the communication I/F 12 corresponds to the electronic signature of the key management organization attached thereto by using the public key of the key management organization stored in the storage section 16. That is, the control section 15 determines the validity of the received data by performing a DSA (Digital Signature Algorithm) verification computation process for public key encryption. If the determination result shows that the received data is valid, the authentication process continues. Otherwise, the authentication process is terminated.

If the processing continues, the control section 15 of the source 1 checks whether or not the ID of the other party in the certificate has already been entered in the authenticated ID list (hereinafter described as an “ID list”) stored in the storage section 16. If the certificate has already been entered, “0” is substituted in a variable CntUp.

If, on the other hand, the ID of the other party in the certificate has not been entered in the ID list, the control section 15 of the source 1 compares the number of sinks 2 for which reception has been permitted (hereinafter described as a “variable SinkCnt”) with the upper-limit number which indicates the number of receptions which are permitted (hereinafter described as a “variable MaxSink”). When the variable SinkCnt is smaller, “1” is substituted in the variable CntUp.

When SinkCnt=MaxSink, the authentication process is terminated. Also, the variable MaxSink may not be a variable (that is, it may be a constant).

Then, the control section 15 of the source 1 generates a pseudo-random number Random_challenge on the basis of a pseudo-random number generation algorithm, and transmits it as a communication command to the sink 2 ({circle around (2)} in FIG. 5).

When the control section 24 of the sink 2-1 receives this communication command, the control section 24 performs a DSA Sign computation process for public key encryption on the value thereof by using its own secret key stored in the storage section 25 in order to calculate the electronic signature. The control section 24 of the sink 2-1 transmits the calculated electronic signature, as a communication command (Response data), to the source 1 ({circle around (3)} in FIG. 5).

When the control section 15 of the source 1 receives this communication command, the control section 15 determines whether or not the pseudo-random number Random_challenge transmitted by the control section 15 corresponds to this electronic signature, that is, performs the above-mentioned DSA verification computation process in order to determine the validity of the data. Here, however, in place of the above-described public key of the key management organization, the public key of the other party in the certificate received from the other party is used. When the result of the determination shows that the data is valid, the authentication process is continued. Otherwise, the authentication process is terminated.

When the processing continues, the control section 15 of the source 1 transmits to the sink 2-1, as a communication command, key information necessary for decrypting the encryption applied to the content ({circle around (1)} in FIG. 5), and increases the value of the variable SinkCnt by the value of the variable CntUp. Then, the control section 15 of the source 1 checks whether or not the ID of the other party in the certificate has already been entered in the authenticated ID list stored in the storage section 16. If it has already been entered, “0” is substituted in the variable CntUp. On the other hand, if the ID of the other party in the certificate has not been entered in the ID list, the variable SinkCnt is compared with the variable MaxSink, and if the variable SinkCnt is smaller, “1” is substituted in the variable CntUp.

The sink 2-1 can receive the content by receiving the key information and by decrypting the encryption applied to the content by using the key information.

Also, as in the source 1 and the sink 2-2 shown in FIG. 1, in a case where the content output from the source 1 is received by the sink 2-2 after going through the bridge 3-1, the sink 2-2 and the bridge 3-1 perform an authentication process such as that shown in FIG. 5. That is, even in a case where content is transmitted via two or more bridges as in the source 1 and the sink 2-3 or the source 1 and the sink 2-4, the source 1 and the last bridge 3-2 (the bridge which is directly connected to the sinks 2-3 and 2-4) perform similar authentication processes.

The processing flow of the sink 2 in the above authentication process is shown in FIG. 6, and the processing flow of the source 1 is shown in FIG. 7.

The authentication process of the source 1 is the same as that of the case of a sink 2 even if the other party is a bridge 3. For the authentication process of the bridge 3, the process shown in step S15 of FIG. 7 differs from that in the case of the sink 2. Specifically, when SinkCnt=MaxSink, in order to increase the value of the variable MaxSink, the bridge 3 performs an authentication process for requesting reception permission from the source 1 or a bridge 3 (in the case of the example of FIG. 1, the source 1 if the bridge 3 is the bridge 3-1 and the bridge 3-1 if the bridge 3 is the bridge 3-2) which is the transmission source of the content received (input) by the bridge 3. In this case, a request for an additional increase in the number of receiving units by one or more is made. When this authentication process is successful, the processing of step S16 or subsequent steps in FIG. 7 is continued.

FIG. 8 is an illustration of an authentication process in a case where the source 1 and the bridge 3-1 (FIG. 1) are directly connected.

Initially, the control section 35 of the bridge 3-1 transmits its own certificate, variable RelCnt, and variable AbsCnt to the source 1 ({circle around (1)} in FIG. 8). Here, the variable RelCnt represents the number of units for which the bridge 3-1 desires to newly obtain reception permission, and the variable AbsCnt represents the total number of units for which permission has already been obtained and the number of units for which permission is desired this time.

When the control section 15 of the source 1 receives the certificate and the variables, the control section 15 determines whether or not the certificate is valid by performing the above-described DSA verification computation process. When the result of the determination shows that the certificate is not valid, the authentication process is terminated.

When the processing continues, the control section 15 of the source 1 checks whether or not the ID of the other party in the certificate has already been entered in its own ID list. If the certificate has already been entered, the variable RelCnt is substituted in the variable CntUp.

If, on the other hand, the ID of the other party in the certificate has not been entered in the ID list, the control section 15 of the source 1 substitutes the variable AbsCnt in the variable CntUp. Then, the control section 15 of the source 1 determines whether the value resulting when the variable CntUp is added to the variable SinkCnt is smaller than the variable MaxSink. When they are equal, the authentication process is terminated.

Then, the control section 15 of the source 1 generates a pseudo-random number Random_challenge, and transmits it as a communication command to the bridge 3-1 ({circle around (2)} in FIG. 8).

When the control section 35 of the bridge 3-1 receives this communication command, the control section 35 performs the above-described DSA Sign computation process on that value, and the transmitted variable RelCnt and variable AbsCnt by using its own secret key stored in the storage section 36 in order to calculate the electronic signature. The control section 35 of the bridge 3-1 transmits the calculated electronic signature as a communication command (Response data) to the source 1 ({circle around (3)} in FIG. 8).

When the control section 15 of the source 1 receives this communication command, the control section 15 determines whether or not this electronic signature corresponds to the pseudo-random number Random_challenge transmitted by the control section 15 and the received variable RelCnt and variable AbsCnt, that is, determines the validity of the data by performing the DSA verification computation process. Here, however, in place of the above-described public key of the key management organization, the public key of the other party in the certificate received from the other party is used. When the result of the determination shows that the data is not valid, the authentication process is terminated.

When the processing continues, the control section 15 of the source 1 transmits, as a communication command, to the bridge 3-1 the key information necessary for decrypting the encryption applied to the content ({circle around (4)} in FIG. 8), and increases the value of the variable SinkCnt by the value of the variable CntUp. After this, if the ID of the other party has not been entered in the ID list, the control section 15 adds it to the list.

The bridge 3-1 receives the key information and decrypts the encryption applied to the content by using the key information, re-encrypts the content, and then outputs it. Then, the control section 35 of the bridge 3-1 increases the value of the variable MaxSink by the value of the variable RelCnt.

The processing flow of the bridge 3 in the above authentication process is shown in FIG. 9, and the processing flow of the source 1 is shown in FIG. 10.

As in the source 1 and the sink 2-3 or the source 1 and the sink 2-4 shown in FIG. 1, in a case where the content which is output from the source 1 is received by the sinks 2-3 and 2-4 after going through two of bridges 3-1 and 3-2 or more, the bridge 3-1 which outputs the content (hereinafter described as a “Tx bridge”) and the bridge 3-2 which receives it (hereinafter described as an “Rx bridge”) perform an authentication process such as that shown in FIG. 8.

The authentication process of the Rx bridge is the same as that in the case where the other party is the source 1.

For the authentication process of the Tx bridge, the process shown in step S46 of FIG. 10 differs from that of the case of the source 1. Specifically, when SinkCnt+CntUp>MaxSink, in order to increase the value of the variable MaxSink, the Tx bridge performs an authentication process for requesting the source 1 or the bridge 3, which is the transmission source of the content input to the Tx bridge, to permit reception (in the case of the example of FIG. 1, the bridge 3-1 requests authentication from the source 1). In this case, a request for additional information in the number of receiving units of ((SinkCnt+CntUp)−MaxSink) or more is made. When this authentication process is successful, the processing of step S50 and subsequent steps of FIG. 10 continues.

As another processing example, a case in which the variable RelCnt and the variable AbsCnt are transmitted separately from the certificate is possible. For example, there is also a method of transmitting them together with the Response shown at {circle around (3)} in FIG. 8 or transmitting them by a completely different communication command.

Also, there is a method in which in step S15 of FIG. 7 or in step S46 of FIG. 10, when the bridges 3-1 and 3-2 perform an authentication process with a newly connected source 1 or bridge 3, regardless of the result, the processing thereafter is not continued. That is, a new authentication can be considered to be one for making subsequent authentications successful.

Furthermore, in a case where the sink 2 stops receiving its own output and loses information necessary for decrypting the encryption, the source 1 or the bridge 3 can decrease the number of the variable SinkCnt by the number corresponding to the number of sinks 2. For example, when the source 1 or the bridge 3 changes the key information for the encryption to be applied to the content, it is possible for the sink 2 to set the variable SinkCnt to 0.

As described above, since the source 1 or the bridge 3 limits the number of receiving units or sinks 2 capable of receiving output, the advantages such as those described below are obtained.

(1) It is possible for the owner of content to prevent illegal viewing and recording of the content.

(2) Even when a signal is re-output using a bridge, it is possible for the source to limit the number of units, including the sink which exists at the end of the bridge.

(3) Since the limitation of the number of units is performed using an ID unique to the device, even if the same sink performs authentication many times, the number of units will not be increased by mistake.

(4) Since the increase or decrease in the number of receiving units and the total number of receiving units are informed when the bridge requests reception permission from the source or another bridge, it is possible for the source and the other bridge to easily change the variable SinkCnt to a correct value in either the case where authentication with the bridge has been performed or the case where authentication with the bridge has not been performed.

Since public-key cryptographic technology is used, the device-unique ID and the requested number of units can be safely transferred to another unit, and correct number-of-devices management can be performed.

Although the above-described series of processes can be performed by hardware, these can also be performed by software. In the case where the series of processes is performed by software, programs which form the software are installed from a recording medium into a computer incorporated into dedicated hardware or, for example, into a general-purpose personal computer capable of executing various types of functions by installing various programs.

This recording medium is constructed by not only packaged media formed of a magnetic disk (including a floppy disk), an optical disk (including a CD-ROM (Compact Disk-Read Only Memory), and a DVD (Digital Versatile Disk)), a magneto-optical disk (including an MD (Mini-Disk)), or a semiconductor memory, in which programs are recorded, but also is constructed by a ROM, a hard disk, etc., in which programs are stored, which is provided to a user in such a manner as to be preinstalled into a computer.

In this specification, steps which describe a program stored in a recording medium contain not only processing performed in a time-series manner along the described sequence, but also processing performed in parallel or individually although the processing is not necessarily performed in a time-series manner.

In this specification, the system represents the overall apparatus composed of plural devices.

Although the invention herein has been described with reference to particular embodiments, it is to be understood that these embodiments are merely illustrative of the principles and applications of the present invention. It is therefore understood that numerous modifications may be made to the illustrative embodiments and that other arrangements may be devised without departing from the spirit and scope of the present invention as defined by the appended claims.

Claims

1. An information processing apparatus, comprising:

a random value transmitting unit that transmits a random value to another information processing apparatus that receives encrypted content;
a signature judging unit that judges whether a signature is valid, the signature being generated by the another information processing apparatus based on the random value and then transmitted from the another information processing apparatus;
a key transmitting unit that transmits key information used for decrypting the encrypted content to the another processing apparatus in response to the signature being valid;
a determining unit that determines an additional value used to update a count of information processing apparatuses that receive the key information based on whether identification information of the another information processing apparatus is registered in a registration list that includes respective identification information of each one of the information processing apparatuses that receive the key information; and
an updating unit that updates the count by adding to it the additional value.

2. An information processing apparatus according to claim 1, wherein the random value is generated using a pseudo-random number generation process.

3. An information processing apparatus according to claim 1, further comprising:

a receiving unit that receives from the another information processing apparatus a digital certificate associated with the another information processing apparatus, and
a control unit that determines whether the digital certificate received from the another information processing apparatus is valid,
wherein the random value transmitting unit transmits the random value to the another information processing apparatus in response to the digital certificate being determined to be valid.

4. An information processing apparatus according to claim 3, wherein the digital certificate includes the identification information of the another information processing apparatus and further key information associated with the another information processing apparatus.

5. An information processing apparatus according to claim 1, wherein the signature is generated by the another information processing apparatus using further key information associated with the another information processing apparatus.

6. An information processing apparatus according to claim 5, wherein the further key information associated with the another information processing apparatus is a private key.

7. An information processing apparatus according to claim 1, wherein the signature judging unit judges whether the signature is valid using further key information associated with the another information processing apparatus.

8. An information processing apparatus according to claim 7, wherein the further key information associated with the another information processing apparatus is a public key.

9. An information processing apparatus according to claim 1, wherein the random value transmitting unit transmits the random value to the another information processing apparatus in response to the count being less than a predefined maximum value.

10. An information processing apparatus according to claim 1, wherein in response to the determining unit determining that the identification information of the another information processing apparatus is not registered in the registration list, the determining unit determines the additional value and the updating unit updates the count by adding to it the additional value, and in response to the determining unit determining that the identification information of the another information processing apparatus is registered in the registration list, the determining unit does not determine the additional value and the updating unit does not update the count.

11. An information processing apparatus according to claim 1, further comprising: a control section that operates as the random value transmitting unit, the signature judging unit, the key transmitting unit, and the determining unit.

12. An information processing apparatus according to claim 1, further comprising: a communication interface (I/F), wherein the random value transmitting unit and the key transmitting unit each transmit to the another information processing apparatus via the communication interface, and the signature generated by the another information processing apparatus is received via the communication interface.

13. An information processing apparatus according to claim 1, further comprising: a content player that plays back content recorded on a medium.

14. An information processing apparatus according to claim 1, further comprising: an encryption section that encrypts at least one of played back content or received content.

15. An information processing apparatus according to claim 1, further comprising: a storage section that stores at least one of played back content or received content.

16. An information processing method carried out by an information processing apparatus, the method comprising:

transmitting a random value to another information processing apparatus that receives encrypted content;
judging whether a signature is valid, the signature being generated by the another information processing apparatus based on the random value and then transmitted from the another information processing apparatus;
transmitting key information used for decrypting the encrypted content to the another processing apparatus in response to the signature being valid;
determining an additional value used to update a count of information processing apparatuses that receive the key information based on whether the identification information of the another information processing apparatus is registered in a registration list that includes respective identification information of each one of the information processing apparatuses that receive the key information; and
updating the count by adding to it the additional value.

17. A non-transitory computer-readable medium having recorded thereon computer program instructions for an information processing apparatus to execute an information processing method, the method comprising:

transmitting a random value to another information processing apparatus that receives encrypted content;
judging whether a signature is valid, the signature being generated by the another information processing apparatus based on the random value and then transmitted from the another information processing apparatus;
transmitting key information used for decrypting the encrypted content to the another processing apparatus in response to the signature being valid;
determining an additional value used to update a count of information processing apparatuses that receive the key information based on whether the identification information of the another information processing apparatus is registered in a registration list that includes respective identification information of each one of the information processing apparatuses that receive the key information; and
updating the count by adding to it the additional value.

18. A source device, comprising:

a random value transmitting unit that transmits a random value to at least one of a sink device or a bridge device that receives encrypted content;
a signature judging unit that judges whether a signature is valid, the signature being generated by the at least one of a sink device or a bridge device based on the random value and then transmitted from the at least one of a sink device or a bridge device;
a key transmitting unit that transmits key information used for decrypting the encrypted content to the at least one of a sink device or a bridge device in response to the signature being valid;
a determining unit that determines an additional value used to update a count of devices that receive the key information based on whether identification information of the at least one of a sink device or a bridge device is already registered in a registration list that includes respective identification information of each one of the devices that receive the key information; and
an updating unit that updates the count by adding to it the additional value.

19. A source device according to claim 18, wherein the random value transmitting unit transmits the random value to the at least one of a sink device or a bridge device in response to one or more of (i) the count being less than a predefined maximum value and (ii) the identification information of the at least one of a sink device or a bridge device being already registered in the registration list.

20. A source device according to claim 18, wherein the random value transmitting unit, in response to the count being equal to the predefined maximum value and the identification information of the at least one of a sink device or a bridge device not being already registered in the registration list, does not transmit the random value to the at least one of a sink device or a bridge device.

21. A source device according to claim 18, further comprising an information updating unit that deletes the identification information registered in the registration list and resets to zero the count of devices that receive the key information in response to the decryption key being changed.

22. An information processing method carried out by a source device, the method comprising:

transmitting a random value to at least one of a sink device or a bridge device that receives encrypted content;
judging whether a signature is valid, the signature being generated by the at least one of a sink device or a bridge device based on the random value and then transmitted from the at least one of a sink device or a bridge device;
transmitting key information used for decrypting the encrypted content to the at least one of a sink device or a bridge device in response to the signature being valid;
determining an additional value used to update a count of devices that receive the key information based on whether the identification information of the at least one of a sink device or a bridge device is already registered in a registration list that includes respective identification information of each one of the devices that receive the key information; and
updating the count by adding to it the additional value.

23. An information processing method according to claim 22, wherein the random value is transmitted to the at least one of a sink device or a bridge device in response to one or more of (i) the count being less than a predefined maximum value and (ii) the identification information of the at least one of a sink device or a bridge device being already registered in the registration list.

24. An information processing method according to claim 22, wherein in response to the count being equal to the predefined maximum value and the identification information of the at least one of a sink device or a bridge device not being already registered in the registration list, the random value is not transmitted to the at least one of a sink device or a bridge device.

25. An information processing method according to claim 22, further comprising deleting the identification information registered in the registration list and resetting to zero the count of devices that receive the key information in response to the decryption key being changed.

26. A non-transitory computer-readable medium having recorded thereon computer program instructions for a source device to execute an information processing method, the method comprising:

transmitting a random value to at least one of a sink device or a bridge device that receives encrypted content;
judging whether a signature is valid, the signature being generated by the at least one of a sink device or a bridge device based on the random value and then transmitted from the at least one of a sink device or a bridge device;
transmitting key information used for decrypting the encrypted content to the at least one of a sink device or a bridge device in response to the signature being valid;
determining an additional value used to update a count of devices that receive the key information based on whether the identification information of the at least one of a sink device or a bridge device is already registered in a registration list that includes respective identification information of each one of the devices that receive the key information; and
updating the count by adding to it the additional value.

27. A non-transitory computer-readable medium according to claim 26, wherein the random value is transmitted to the at least one of a sink device or a bridge device in response to one or more of (i) the count being less than a predefined maximum value and (ii) the identification information of the at least one of a sink device or a bridge device being already registered in the registration list.

28. A non-transitory computer-readable medium according to claim 26, wherein in response to the count being equal to the predefined maximum value and the identification information of the at least one of a sink device or a bridge device not being already registered in the registration list, the random value is not transmitted to the at least one of a sink device or a bridge device.

29. A non-transitory computer-readable medium according to claim 26, wherein the information processing method further comprises deleting the identification information registered in the registration list and resetting to zero the count of devices that receive the key information in response to the decryption key being changed.

30. A bridge device, comprising:

a random value transmitting unit that transmits a random value to at least one of a sink device or another bridge device that receives encrypted content;
a signature judging unit that judges whether a signature is valid, the signature being generated by the at least one of a sink device or another bridge device based on the random value and then transmitted from the at least one of a sink device or another bridge device;
a key transmitting unit that transmits key information used for decrypting the encrypted content to the at least one of a sink device or another bridge device in response to the signature being valid;
a determining unit that determines an additional value used to update a count of devices that receive the key information based on whether identification information of the at least one of a sink device or another bridge device is already registered in a registration list that includes respective identification information of each one of the devices that receive the key information; and
an updating unit that updates the count by adding to it the additional value.

31. A bridge device according to claim 30, wherein the random value transmitting unit transmits the random value to the at least one of a sink device or another bridge device in response to one or more of (i) the count being less than a predefined maximum value and (ii) the identification information of the at least one of a sink device or another bridge device being already registered in the registration list.

32. A bridge device according to claim 30, wherein in response to the count being equal to the predefined maximum value and the identification information of the at least one of a sink device or another bridge device not being already registered in the registration list, does not transmit the random value is not transmitted to the at least one of a sink device or another bridge device.

33. A bridge device according to claim 30, further comprising an information updating unit that deletes the identification information registered in the registration list and resets to zero the count of devices that receive the key information in response to the decryption key being changed.

34. A bridge device according to claim 30, wherein the bridge device receives, from a source device, the key information used for decrypting the encrypted content.

35. An information processing method carried out by a bridge device, the method comprising:

transmitting a random value to at least one of a sink device or another bridge device that receives encrypted content;
judging whether a signature is valid, the signature being generated by the at least one of a sink device or another bridge device based on the random value and then transmitted from the at least one of a sink device or another bridge device;
transmitting key information used for decrypting the encrypted content to the at least one of a sink device or another bridge device in response to the signature being valid;
determining an additional value used to update a count of devices that receive the key information based on whether the identification information of the at least one of a sink device or another bridge device is already registered in a registration list that includes respective identification information of each one of the devices that receive the key information; and
updating the count by adding to it the additional value.

36. An information processing method according to claim 35, wherein the random value is transmitted to the at least one of a sink device or another bridge device in response to one or more of (i) the count being less than a predefined maximum value and (ii) the identification information of the at least one of a sink device or another bridge device being already registered in the registration list.

37. An information processing method according to claim 35, wherein in response to the count being equal to the predefined maximum value and the identification information of the at least one of a sink device or another bridge device not being already registered in the registration list, the random value is not transmitted to the at least one of a sink device or another bridge device.

38. An information processing method according to claim 35, further comprising deleting the identification information registered in the registration list and resetting to zero the count of devices that receive the key information in response to the decryption key being changed.

39. An information processing method according to claim 35, wherein the bridge device receives, from a source device, the key information used for decrypting the encrypted content.

40. A non-transitory computer-readable medium having recorded thereon computer program instructions for a bridge device to execute an information processing method, the method comprising:

transmitting a random value to at least one of a sink device or another bridge device that receives encrypted content;
judging whether a signature is valid, the signature being generated by the at least one of a sink device or another bridge device based on the random value and then transmitted from the at least one of a sink device or another bridge device;
transmitting key information used for decrypting the encrypted content to the at least one of a sink device or another bridge device in response to the signature being valid;
determining an additional value used to update a count of devices that receive the key information based on whether the identification information of the at least one of a sink device or another bridge device is already registered in a registration list that includes respective identification information of each one of the devices that receive the key information; and
updating the count by adding to it the additional value.

41. A non-transitory computer-readable medium according to claim 40, wherein the random value is transmitted to the at least one of a sink device or another bridge device in response to one or more of (i) the count being less than a predefined maximum value and (ii) the identification information of the at least one of a sink device or another bridge device being already registered in the registration list.

42. A non-transitory computer-readable medium according to claim 40, wherein in response to the count being equal to the predefined maximum value and the identification information of the at least one of a sink device or another bridge device not being already registered in the registration list, the random value is not transmitted to the at least one of a sink device or another bridge device.

43. A non-transitory computer-readable medium according to claim 40, wherein the information processing method further comprises deleting the identification information registered in the registration list and resetting to zero the count of devices that receive the key information in response to the decryption key being changed.

44. A non-transitory computer-readable medium according to claim 40, wherein the bridge device receives, from a source device, the key information used for decrypting the encrypted content.

45. A system, comprising:

a source device that transmits encrypted content; and
a bridge device that receives the encrypted content and transmits the encrypted content;
the source device, including: a first random value transmitting unit that transmits a first random value to the bridge device, a first signature judging unit that judges whether a signature generated by the bridge device is valid, the signature being generated based on the first random value and then transmitted from the bridge device, a first key transmitting unit that transmits key information used for decrypting the encrypted content to the bridge device in response to the signature generated by the bridge device being valid, a first determining unit that determines an additional value used to update a count of devices that receive the key information from the source device based on whether identification information of the bridge device is already registered in a first registration list that includes respective identification information of each one of the devices that receive the key information from the source device, and a first updating unit that updates the count of devices that receive the key information from the source device by adding to it the additional value;
the bridge device, including: a second random value transmitting unit that transmits a second random value to at least one of a sink device or another bridge device that receives the encrypted content; a second signature judging unit that judges whether a signature generated by the at least one of a sink device or another bridge device is valid, the signature being generated based on the second random value and then transmitted from the at least one of a sink device or another bridge device; a second key transmitting unit that transmits the key information used for decrypting the encrypted content to the at least one of a sink device or another bridge device in response to the signature generated by the at least one of a sink device or another bridge device being valid; a second determining unit that determines a further value used to update a count of devices that receive the key information from the bridge device based on whether identification information of the at least one of a sink device or another bridge device is already registered in a second registration list that includes respective identification information of each one of the devices that receive the key information from the bridge device; and a second updating unit that updates the count of devices that receive the key information from the bridge device by adding to it the further value.

46. A system according to claim 45, wherein the bridge device further comprises an information updating unit that deletes the identification information registered in the second registration list and resets to zero the count of devices that receive the key information from the bridge device in response to the decryption key being changed by the source device.

47. An information processing apparatus that receives encrypted content, the information processing apparatus comprising:

a random value receiving unit that receives a random value transmitted by another information processing apparatus;
a signature transmitting unit that generates a signature based on the received random value and that transmits the signature to the another information processing apparatus; and
a key receiving unit that receives key information transmitted by the another processing apparatus in response to the another processing apparatus judging that the signature is valid, the key information being used for decrypting the encrypted content
wherein the random value receiving unit receives the random value from the another information processing apparatus in response to the another information processing apparatus determining that a count of information processing apparatuses that receive the key information is less than a predefined maximum value.

48. An information processing apparatus according to claim 47, further comprising:

a digital certificate transmitting unit that transmits a digital certificate associated with the information processing apparatus to the another information processing apparatus,
wherein the random value receiving unit receives the random value from the another information processing apparatus in response to the another information processing apparatus determining that the digital certificate is be valid.

49. An information processing apparatus according to claim 48, wherein the digital certificate includes the identification information of the information processing apparatus and further key information associated with the information processing apparatus.

50. An information processing apparatus according to claim 47, wherein the signature transmitting unit generates the signature using further key information associated with the information processing apparatus.

51. An information processing apparatus according to claim 50, wherein the further key information associated with the information processing apparatus is a private key.

52. An information processing apparatus according to claim 47, wherein the key receiving unit receives the key information in response to the another information processing apparatus judging that the signature is valid using further key information associated with the information processing apparatus.

53. An information processing apparatus according to claim 52, wherein the further key information associated with the information processing apparatus is a public key.

54. An information processing apparatus according to claim 47, further comprising: a control section that operates as the random value receiving unit, the signature transmitting unit, and the key receiving unit.

55. An information processing apparatus according to claim 47, further comprising: a communication interface (I/F), wherein the random value receiving unit receives the random value from the another information processing apparatus via the communication interface, and the key transmitting unit transmits the key to the another information processing apparatus via the communication interface.

56. An information processing apparatus according to claim 47, further comprising: an decryption section that decrypts the encrypted content using the received key information.

57. An information processing apparatus according to claim 47, further comprising: a storage section that stores at least one of the encrypted content or the decrypted content.

58. A sink device that receives encrypted content, the sink device comprising:

a random value receiving unit that receives a random value transmitted by at least one of a source device or a bridge device;
a signature transmitting unit that generates a signature based on the received random value and that transmits the signature to the at least one of the source device or the bridge device; and
a key receiving unit that receives key information transmitted by the at least one of the source device or the bridge device in response to the at least one of the source device or the bridge device judging that the signature is valid, the key information being used for decrypting the encrypted content
wherein the random value receiving unit receives the random value from the at least one of the source device or the bridge device in response to at least one of the source device or the bridge device determining that a count of such sink devices that receive the key information is less than a predefined maximum value.

59. A sink device according to claim 58, further comprising:

a digital certificate transmitting unit that transmits a digital certificate associated with the sink device to the at least one of the source device or the bridge device,
wherein the random value receiving unit receives the random value from the at least one of the source device or the bridge device in response to the at least one of the source device or the bridge device determining that the digital certificate is be valid.

60. A sink device according to claim 59, wherein the digital certificate includes the identification information of the sink device and further key information associated with the sink device.

61. A sink device according to claim 58, wherein the signature transmitting unit generates the signature using further key information associated with the sink device.

62. A sink device according to claim 61, wherein the further key information associated with the sink device is a private key.

63. A sink device according to claim 58, wherein the key receiving unit receives the key information in response to the at least one of the source device or the bridge device judging that the signature is valid using further key information associated with the sink device.

64. A sink device according to claim 63, wherein the further key information associated with the sink device is a public key.

65. A system, comprising:

a source device that transmits encrypted content; and
a sink device that receives the encrypted content from the source device;
the source device including: a random value transmitting unit that transmits a random value to the sink device, a signature judging unit that judges whether a signature generated by the sink device is valid, the signature being generated based on the random value and then transmitted from the sink device, a key transmitting unit that transmits key information used for decrypting the encrypted content to the sink device in response to the signature generated by the sink device being valid, a determining unit that determines an additional value used to update a count of devices that receive the key information from the source device based on whether identification information of the sink device is already registered in a sink registration list that includes respective identification information of each one of the devices that receive the key information from the source device, and an updating unit that updates the count of devices that receive the key information from the source device by adding to it the additional value;
the sink device including: a random value receiving unit that receives the random value transmitted by the bridge device, a signature transmitting unit that generates the signature based on the received random value and that transmits the signature to the source device, and a key receiving unit that receives the key information transmitted by the source device in response to the source device judging that the signature is valid, the key information being used for decrypting the encrypted content.

66. A system, comprising:

a source device that transmits encrypted content;
a bridge device that receives the encrypted content from the bridge device and transmits the encrypted content; and
a sink device that receives the encrypted content from the bridge device;
the source device including: a first random value transmitting unit that transmits a first random value to the bridge device, a first signature judging unit that judges whether a first signature generated by the bridge device is valid, the first signature being generated based on the first random value and then transmitted from the bridge device, a first key transmitting unit that transmits key information used for decrypting the encrypted content to the bridge device in response to the first signature generated by the bridge device being valid, a first determining unit that determines an additional value used to update a count of devices that receive the key information from the source device based on whether identification information of the bridge device is already registered in a first registration list that includes respective identification information of each one of the devices that receive the key information from the source device, and a first updating unit that updates the count of devices that receive the key information from the source device by adding to it the additional value;
the bridge device including: a second random value transmitting unit that transmits a second random value to the sink device; a second signature judging unit that judges whether a second signature generated by the sink device is valid, the second signature being generated based on the second random value and then transmitted from the sink device; a second key transmitting unit that transmits the key information used for decrypting the encrypted content to the sink device in response to the second signature generated by the sink device being valid; a second determining unit that determines a further value used to update a count of devices that receive the key information from the bridge device based on whether identification information of the sink device is already registered in a second registration list that includes respective identification information of each one of the devices that receive the key information from the bridge device; and a second updating unit that updates the count of devices that receive the key information from the bridge device by adding to it the further value;
the sink device including: a random value receiving unit that receives the second random value transmitted by the bridge device, a signature transmitting unit that generates the second signature based on the received second random value and that transmits the signature to the bridge device, and a key receiving unit that receives the key information transmitted by the bridge device in response to the bridge device judging that the second signature is valid, the key information being used for decrypting the encrypted content.
Referenced Cited
U.S. Patent Documents
5159633 October 27, 1992 Nakamura
5319705 June 7, 1994 Halter et al.
5499298 March 12, 1996 Narasimhalu et al.
5553143 September 3, 1996 Ross et al.
5701343 December 23, 1997 Takashima et al.
5745678 April 28, 1998 Herzberg et al.
5892900 April 6, 1999 Ginter et al.
5905860 May 18, 1999 Olsen et al.
5915019 June 22, 1999 Ginter et al.
5926624 July 20, 1999 Katz et al.
6055314 April 25, 2000 Spies et al.
6119227 September 12, 2000 Mao
6131162 October 10, 2000 Yoshiura et al.
6189146 February 13, 2001 Misra et al.
6209787 April 3, 2001 Iida
6263081 July 17, 2001 Miyaji et al.
6327656 December 4, 2001 Zabetian
6343280 January 29, 2002 Clark
6427140 July 30, 2002 Ginter et al.
6477649 November 5, 2002 Kambayashi et al.
6516413 February 4, 2003 Aratani et al.
6519571 February 11, 2003 Guheen et al.
6574612 June 3, 2003 Baratti et al.
6584552 June 24, 2003 Kuno et al.
6607136 August 19, 2003 Atsmon et al.
6697944 February 24, 2004 Jones et al.
6700989 March 2, 2004 Itoh et al.
6772340 August 3, 2004 Peinado et al.
6785713 August 31, 2004 Freeman et al.
6859535 February 22, 2005 Tatebayashi et al.
6873975 March 29, 2005 Hatakeyama et al.
6891953 May 10, 2005 DeMello et al.
6920436 July 19, 2005 Stefik et al.
6922724 July 26, 2005 Freeman et al.
6950941 September 27, 2005 Lee et al.
6968058 November 22, 2005 Kondoh et al.
6989484 January 24, 2006 Gross
7103574 September 5, 2006 Peinado et al.
7136838 November 14, 2006 Peinado et al.
7202693 April 10, 2007 Kush
20030120611 June 26, 2003 Yoshino et al.
20030191946 October 9, 2003 Auer et al.
20040031856 February 19, 2004 Atsmon et al.
Foreign Patent Documents
07219763 August 1995 JP
07287654 October 1995 JP
08101867 April 1996 JP
09269916 October 1997 JP
11024916 January 1999 JP
2000047870 February 2000 JP
2000056967 February 2000 JP
2000059323 February 2000 JP
2002084274 March 2002 JP
Other references
  • Office Action from Japanese Application No. 2000-211787, dated Feb. 24, 2011.
  • Office Action from Japanese Application No. 2000-211787, dated Oct. 18, 2011.
  • Office Action from Japanese Application No. 2010-156648, dated Nov. 29, 2012.
Patent History
Patent number: 8595500
Type: Grant
Filed: Jul 23, 2010
Date of Patent: Nov 26, 2013
Patent Publication Number: 20100313026
Assignee: Sony Corporation
Inventor: Takehiko Nakano (Tokyo)
Primary Examiner: David Garcia Cervetti
Application Number: 12/842,312